Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/32332e3136382e32342e302f32342d3332203d3e20333933353737.roa
File:                     32332e3136382e32342e302f32342d3332203d3e20333933353737.roa (raw, json)
Hash identifier:          yy3ReDpnQcjcKNTy6WCxuJGTOczg4awwuWkusyCcol4=
Subject key identifier:   6D:08:D8:62:3C:BB:CD:AD:5D:3E:DA:B0:B3:2C:38:0E:70:76:72:E3
Certificate issuer:       /CN=8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a
Certificate serial:       695584529A75AD5BB68678E0D8B6795831FBEC32
Authority key identifier: 76:BF:44:7C:93:50:84:94:9D:B0:46:FF:77:38:B1:E5:7C:82:4F:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/32332e3136382e32342e302f32342d3332203d3e20333933353737.roa
Signing time:             Wed 16 Jul 2025 09:13:36 +0000
ROA not before:           Wed 16 Jul 2025 09:08:36 +0000
ROA not after:            Wed 15 Jul 2026 09:13:36 +0000
asID:                     393577
IP address blocks:        23.168.24.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.crl
                          rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 01:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:55:84:52:9a:75:ad:5b:b6:86:78:e0:d8:b6:79:58:31:fb:ec:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a
        Validity
            Not Before: Jul 16 09:08:36 2025 GMT
            Not After : Jul 15 09:13:36 2026 GMT
        Subject: CN=6D08D8623CBBCDAD5D3EDAB0B32C380E707672E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:2f:38:90:fd:0d:d0:b8:1e:fe:82:5f:cb:cb:
                    17:55:98:42:71:df:9e:71:c1:5a:72:0c:9d:d1:e6:
                    9e:b9:a6:ae:91:98:07:fe:c2:c5:5b:bc:b5:6c:3d:
                    4b:2d:26:a5:7f:e6:31:41:1a:0f:65:af:75:d3:c3:
                    f3:70:61:56:d2:ba:50:64:66:e4:82:c9:cc:11:dc:
                    22:0c:ad:23:bf:e0:0b:3d:70:d4:80:a6:6c:a4:df:
                    94:11:ed:15:74:3b:0d:40:97:f8:da:15:b5:e2:66:
                    36:98:3e:90:fe:ec:50:54:4f:71:14:4e:03:f8:a8:
                    35:9f:1e:c9:df:2c:d0:61:3f:f7:05:e9:56:f8:92:
                    de:78:8c:48:6c:ee:9d:07:39:c5:58:0a:86:4f:48:
                    91:4c:bc:49:48:7e:4f:83:ce:3a:73:b7:38:bd:1f:
                    3e:46:5f:ef:15:2a:91:fd:00:42:30:ea:71:c0:bf:
                    95:ce:dc:d2:a1:e3:2b:30:b4:5c:64:1d:0e:6c:9d:
                    15:32:7d:c1:80:5e:5d:2d:8a:ae:bb:a4:1a:da:83:
                    de:78:54:e1:18:04:54:56:a2:83:ef:81:bc:dd:60:
                    ca:9c:ce:d0:0b:f4:69:6f:85:c5:92:b0:56:3c:90:
                    fa:18:5e:e7:6b:e0:9d:48:a6:78:15:5b:27:dd:be:
                    89:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:08:D8:62:3C:BB:CD:AD:5D:3E:DA:B0:B3:2C:38:0E:70:76:72:E3
            X509v3 Authority Key Identifier:
                keyid:76:BF:44:7C:93:50:84:94:9D:B0:46:FF:77:38:B1:E5:7C:82:4F:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/32332e3136382e32342e302f32342d3332203d3e20333933353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.168.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:ba:48:20:f7:d6:c9:2e:41:18:68:a8:9e:31:81:fb:a1:82:
         2d:15:7f:3c:9f:38:71:d4:0b:8b:68:1e:f7:5d:54:c8:7b:c7:
         c1:f0:93:25:fb:93:fe:50:df:c8:35:21:05:49:3a:1e:b9:08:
         e1:b4:58:7a:98:bd:c6:5f:9a:84:e8:d2:10:50:38:c2:09:a3:
         b3:78:1c:a8:21:05:fc:28:71:6f:1b:6f:7e:8e:93:06:4d:17:
         51:04:35:8a:6c:a7:16:8f:6c:4d:37:6e:4b:58:eb:c3:ec:b7:
         01:e5:d2:73:03:54:59:e7:29:88:be:22:f1:0d:d4:0b:c9:50:
         2d:e6:74:18:06:c0:68:a8:a9:fa:f5:8b:86:2a:8a:0f:da:f4:
         db:8f:8a:11:b6:81:b0:aa:f8:2d:d5:57:1e:01:5f:02:69:73:
         e9:d5:43:94:ad:a5:37:5a:42:8d:33:58:05:a7:75:0a:b9:dd:
         11:65:bb:58:de:6e:ec:52:74:15:eb:fb:b4:0e:b2:83:7a:e6:
         26:33:51:55:59:80:07:a5:36:88:1f:96:c2:d3:73:43:cd:9f:
         7f:8d:b2:f0:aa:a6:1d:c2:a8:1d:18:c3:37:72:1b:18:e1:b0:
         18:e4:92:56:01:c5:1c:03:dd:de:0b:31:1a:7c:40:0c:c0:2f:
         25:11:57:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:16:48 2025 by rpki-client